I'm running a Docker host based on AWS Lightsail targeted individuals for hosting their spare time smaller scale projects.
I'd love to also offer Docker image hosting via AWS ECR, but obviously I wouldn't want one customer's images to be accessible by another customer.
I'd like to use one AWS account for hosting everything on, so that my customers won't need to create an AWS account to get started.
Is that possible somehow? Can I create individual IAM users which only have read and write access to specific images?
One solution is to use different repositories and policies for each user.